Privacy Policy

Chirag Parmar Signatures ("CPS", "we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, store, and protect personal information through our public website, our studio operations, and the CPS app, a mobile application with a customer-facing side (to track your order) and a staff-facing side (to manage orders, measurements, and invoicing).

The CPS app is in development at the time of writing. This policy is drafted to cover it ahead of launch. Have it reviewed by counsel once the app's feature set is final.

1. Scope & Who We Are

Business: Chirag Parmar Signatures

Studio address: 1st Floor, 43, E Cir Rd, Vishweshwarapura, Basavanagudi, Bengaluru, Karnataka 560004

Phone: 072592 62606

Email: support@chiragparmarsignature.com

This policy is framed to align with the Indian Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 and its associated rules. It does not constitute legal advice, so have it reviewed by counsel before going live.

2. Information We Collect

Through the website

• Contact details you submit voluntarily (name, phone number, email) via consultation/booking requests.
• Basic technical data (browser type, device, approximate location via IP) collected automatically for security and analytics.

Through the CPS app: Customer account

• Account data: name, phone number, and role (customer), collected when you sign up.
• Order data: the items in your order, its current stage (e.g. cutting, stitching, trial, alteration, ready, delivered), and its status history.
• Payment status: whether an order is paid, partially paid, or unpaid, and the amounts involved (we do not store full card or bank details).
• Comments: messages you exchange with our staff about your order inside the app.
• Gallery views: photos of finished work shown in the app for browsing (no personal data attached).

Through the CPS app: Staff account

• Staff profile data: name, phone number, role, and an internal access code used to register as staff.
• Order & fitting data staff record on your behalf: body measurements (chest, shoulder, sleeve length, waist, hip, and similar tailoring measurements), fabric and style preferences, fitting notes.
• Invoices: itemised billing generated from your order, which staff may share with you via WhatsApp.
• Activity logs: order and status changes made by staff, for accountability.

3. App Accounts & OTP Login

The CPS app uses OTP (one-time password) login: you enter your phone number, and we send a one-time code by SMS to verify it's you. We do not ask for or store a traditional password. We store your phone number and a session token to keep you signed in, and we do not store the OTP code itself once it has been used or has expired.

Customer accounts can only view their own orders, measurements, and invoices. Staff accounts can view orders across the studio's customers, as needed to do their job, and are individually attributable through activity logs.

4. How We Use Information

• To create and fulfil bespoke garment orders, including fitting and delivery scheduling.
• To let you track your order's status and communicate with our staff about it, in-app or otherwise.
• To generate and share invoices.
• To communicate with you about appointments, order status, and after-sales service.
• To maintain internal business records, invoicing, and staff accountability.
• To respond to enquiries submitted through the website or app.
• To improve our services and studio operations.
• To comply with applicable tax, accounting, and legal obligations.

We do not sell personal data to third parties, and we do not use client measurement or fitting data for advertising purposes.

5. Legal Basis for Processing

We process personal data on the basis of your consent (e.g., when you sign up for the app or share details to book a consultation), for the performance of a contract (fulfilling your bespoke order), and where necessary to comply with a legal obligation (e.g., tax records).

6. Sharing & Third Parties

We share limited data with the following categories of service providers, solely to operate our business:

We do not permit these providers to use your data for their own marketing purposes. We may also disclose data if required by law, court order, or to protect our legal rights.

7. Instagram & Meta Platform Data

We use the Instagram Graph API (via a connected Facebook Page and Instagram Business Account) to display our studio's public posts on this website and, where enabled, to help staff track client conversations initiated over Instagram Direct.

Any data obtained through Meta's Platform is handled in accordance with Meta's Platform Terms and is used only for the purposes disclosed in this policy. See our Data Deletion Instructions for how to request removal of data obtained via Meta Platforms.

8. Data Storage & Security

We apply reasonable technical and organisational safeguards, including OTP-based login rather than stored passwords, role-based access so customer accounts can only see their own data, access controls for staff, and encrypted storage where supported by our hosting provider, to protect personal data against unauthorised access, alteration, or loss. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Data Retention

We retain client order, measurement, and app account data for as long as needed to service repeat orders and alterations, and as required for tax/accounting records (typically up to 8 years per Indian tax record-keeping norms), after which it is securely deleted or anonymised. Website enquiry data not converted into an order is retained for up to 12 months. If you delete your app account, see our Data Deletion Instructions for what is removed and what is retained.

10. Your Rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request erasure of your data, including your app account, subject to our legal retention obligations.
• Withdraw consent at any time for processing based on consent.
• Lodge a grievance with our Grievance Officer (below), and thereafter with the relevant Data Protection Board if unresolved.

To exercise these rights, contact us using the details in Section 14. We will respond within 30 days.

11. Cookies

Our website uses only essential cookies required for basic functionality and, if enabled, privacy-friendly analytics to understand aggregate site traffic. We do not use third-party advertising cookies. The CPS app does not use cookies; it uses a session token stored on your device to keep you signed in.

12. Children's Privacy

Our services are intended for adults placing bespoke garment orders. We do not knowingly collect personal data from children under 18 without parental/guardian involvement in the transaction, and app accounts are not intended for use by children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page.

14. Grievance Officer & Contact

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, our Grievance Officer can be reached at:

See also our Terms & Conditions and Data Deletion Instructions.